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DCS-3000 Implementation Process 







Refer to the CD-ROM provided 

Establish primary points of contact for legal 

and technical issues 

Define carrier’s areas of service 

Identify switching platform (vendor, model, 

software version) 

Identify interconnection requirements (e.g., 
firewall, dial-up restrictions, centralized, etc.) 
Understand policies and procedures 




Roaming partner Identification 
Fee schedule 

Future switch/software upgrade plans 
Fail-safe measures (e.g., what data can carrier 
provide if interconnection is disrupted?) 
Reporting / resolving after-hour technical 
difficulties 

Court orders - will carrier accept faxes; do 
they have preferred wording? 
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Define carrier configuration (centralized, 
decentralized, etc.) 

Identify specific interconnection locations ( 
“Points of Presence”) per switch / market 
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Create interconnection 
Plan / Review with 








. Equipment location (router, modem, etc.) 

. Uninterruptable power source 
. Location of terminating telco circuit (leased 
line or POTS) 

. Responsibility for cable runs 
. Access and security 




DCS-3000 Implementation Process 







. Location of server / client PC 
. Routers 
. Modems 

. Interconnection cables 
. If Title III: 

Interface card(s) 

Connection to Voice Box 
Contact ERF for assistance 
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Create Interconnection 
Plan 7 Review with 









Identify/Order 

Interconnect 



. CCC circuits 

Ringdown 

POTS line at provider and CMP 
ISDN 
. CDC 

Dial-up 
Leased line 
. 2 wire 

. May be 4 wire in middle 
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DCS-3000 Implementation Process 
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. Consult with carrier 
. Obtain IP address of SDM-FT 
. Obtain IP address of E-1 
Same network as SDM-FT 

. Provide above information to ERF contact 
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. Monitoring equipment and software is 
installed in coordination with ERF 
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DCS-3000 Implementation Process 





Coordinate with carrier in advance (during or 
after regular business hours) 

Advise carrier of LE personnel who will attend 
Have personnel available at monitoring facility 
for troubleshooting / testing 
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Test 


. Connectivity 

. Handset-based functional test for proper 
messaging 
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Questions? Questions? Questions? 
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Switch Based Intercepts Course 


The New Paradigm 
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‘^Paradigm ” Defined 


• Paradigm An assumption about the ways 
things work... 

• . . .the paradigm shift is a term used to 
discuss the idea of how things are changing, 
the phrase suggests a change in the overall 
way the universe is seen 


Dcllnilions L-i)iirlc\\ iirNcwloM's Iclcconi l)iclioiuii_\. 16' I \paiklci.l & I ipdalOil I Jilioii. 2000. pg, 65X 
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Intercept Evolution 


'Wires and Pliers ” "Cables and Tables '' 


pg-3 




Traditional Paradigm 


‘Wires & Pliers’ 

- In-band signaling (pen-register and audio over 
the same cireuit) 

- 'DNR-like’ solutions 

- Pen-register data limited to called and calling 
numbers 

- No intercept capabilities for advanced network 
features (e.g. call forwarding and speed dialing) 




Traditional Intercept 



TELCO 

Target j 


--0 



Monitor 


fXB' Collection 

iZM 



t1 

Associate 

Access 
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CALEA Paradigm 


‘Cables & Tables’ 

- Separated delivery of pen-register data and 
audio/call content 

- Switch-based and network-based access 

- Computer-based intercept/collection systems 

- More information available to LEAs (e.g. cell- 
site location, SMS, and call-forwarding) 
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Access and Delivery 


llection System 




CALEA Paradigm 


Call Content Channel (CCC) delivers intercepted 
content (audio and packet data) 

Call Data Channel (CDC) delivers intercepted 
pen-register data: 

- Call Serving System 

- Origination and Termination 

- Answer 

- Redirection 

- Call Change 

- Release 

- Packet Envelope 
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How Long? 


Now ... 

... all major switches have intercept featur 
required by CALEA 

By mid-2002 ... 




DCS-3000 


Initially developed for GSM/PCS- 1900 
switch intercepts 

FBI’s first intercept system for CALEA 
paradigm 

Windows NT-based Client/Server 
architecture 

- Windows’ ease-of-use 

- Flexibility and scalability 
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DCS-3000 Timeline 
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DCS-3000 Network 
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ELSUR/Service Provider Cooperation 
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ELSUR/Service Provider Cooperation 
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ELSUR/Service Provider Cooperation 



DCS-3000 

Manual 

Release Notes 
Troubleshooting Tips 
Reference Materials 

Fone Finder (NPA/NPX decoder) 
Carrier-Specific ELSUR Material 
CALEA Data 
FCC License Information 
Course Materials 
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ELSUR/Service Provider Cooperation 



Links 

Telecom Carrier Sites 
Industry Organizations 
Topical News Sources 
Privacy Advocacy Groups 
AskCALEA.net 

North American Numbering Plan 

Reminder; Links not accessible through FBI Net 
LEO Links are accessible through 
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ELSUR/Service Provider 
Cooperation 




Telecommunications Intercept and 
Collection Technology Unit 


An overview of 

SMS 


Short Message Services 


Chief Technologist 
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DCS-3000 



DCS-3000 software accepts^^H 
messages, capturing and displaying 
relevant information associated with 
short message services 
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TICTU East Coast Conference 


TIC 




TICTU East Coast Conference 








TICTU East Coast Conference 
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TICTU East Coast Conference 
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TICTU East Coast Conference 





TICTU East Coast Conference 




TICTU East Coast Conference 
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Switch-Based Intercept Team 


The S>viteh-Biiscd Intercept Team develops, procures, and deploys 
capabilities to perform peii-re<>ister. Title III aiulTitle 50 interceptions on 
emer”in« telecommunications networks. The Team develops, de|)loys, and 
maintains capabilities for condiictin» electronic intercepts, direction 
finding, and terminal identification on emeriiini! wireless 
teleeommiinications networks. 




Switch Based Intercepts Course 


U U 

Basic Troubleshooting 
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Troubleshooting 


• Troubleshooter - noun; an expert employed 
to locate trouble and make repairs in 
technical equipment. 
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Reference Model 


k 


Application Layer 
Network Layer 
Physieal Layer 
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Reference Model 


Physical Layer 

- mechanical, electrical, and procedural 
interfaces, and the physical transmission 
medium 

• Phone line connection 

• Ethernet connection 

• RS-232 serial connection 
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Reference Model 


Network Layer 

~ Responsible for routing packets from source to 
destination 

- TCP/IP, X.25, RS-232 protocol layer 

• Routers 

• Modems 
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Reference Model 


Application Layer 

- Software layer 

• DCS-3000 Server and Client 

• Switch call intercept system (c.g. SDM & Cl PC) 

- Responsible for decoding, processing, and 
storage 

• File transfer 

• ASN.l decoding 
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Troubleshooting Tools 


ipconfig 

- Displays the current TCP/IP settings on the 
command line 




Troubleshooting Tools 


trace route 

- Useful in identifying and debugging IP routing 
problems 

- Next logical step after a failed ping 

- 'tracert’ for Windows NT; ‘traceroute’ for 
Cisco lOS 



Troubleshooting Tools 

netstat 

- Displays the status of TCP/IP network 
connections to and from the local computer 

- Shows TCP ports being used by applications on 
the local computer to communicate with remote 
computers and devices 
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TICTU East Coast Conference 
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TICTU East Coast Conference 
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TICTU East Coast Conference 
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TICTU East Coast Conference 




TICTU East Coast Conference 





TICTU East Coast Conference 






TICTU West Coast Conference 
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TICTU West Coast Conference 




TICTU West Coast Co 



TICTU WfisfOast Conference 




West Coast Conference 
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SECRET 
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TICTU West Coast 
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TICTU West Coast Conference 
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